Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/2210c7-9959-44f7-ada6-efd3ae985ee4/1/gswXHj3IRnEeBW4uNiQdrJlKYA0.mft
File: gswXHj3IRnEeBW4uNiQdrJlKYA0.mft (raw, json)
Hash identifier: v+Z/6aZjYtS7Y54Mp59Nqmt4Yfspio1LBvS+hElgvOA=
Subject key identifier: 75:91:01:63:B2:56:E8:7E:AD:B9:6F:D4:50:CF:6A:3D:33:1C:9F:16
Authority key identifier: 82:CC:17:1E:3D:C8:46:71:1E:05:6E:2E:36:24:1D:AC:99:4A:60:0D
Certificate issuer: /CN=82cc171e3dc846711e056e2e36241dac994a600d
Certificate serial: 019D9B19C0C22E455E2D75A4C1FBDD714EF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gswXHj3IRnEeBW4uNiQdrJlKYA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/2210c7-9959-44f7-ada6-efd3ae985ee4/1/gswXHj3IRnEeBW4uNiQdrJlKYA0.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 11:00:49 +0000
Manifest this update: Fri 17 Apr 2026 11:00:49 +0000
Manifest next update: Sat 18 Apr 2026 11:00:49 +0000
Files and hashes: 1: gswXHj3IRnEeBW4uNiQdrJlKYA0.crl (hash: fS+mw8xn0B0Wr9/K65HLegyFqrlAE6AYv0W4Os8t8cU=)
2: oE95njlQkWBSsnH1Yv9Om16L1QQ.roa (hash: 9ZO1XVhjSwITS249EhJW2diCc6ZjgTy8NQDIzTk8aNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/2210c7-9959-44f7-ada6-efd3ae985ee4/1/gswXHj3IRnEeBW4uNiQdrJlKYA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/2210c7-9959-44f7-ada6-efd3ae985ee4/1/gswXHj3IRnEeBW4uNiQdrJlKYA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gswXHj3IRnEeBW4uNiQdrJlKYA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:c0:c2:2e:45:5e:2d:75:a4:c1:fb:dd:71:4e:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82cc171e3dc846711e056e2e36241dac994a600d
Validity
Not Before: Apr 17 11:00:49 2026 GMT
Not After : Apr 18 11:00:49 2026 GMT
Subject: CN=75910163b256e87eadb96fd450cf6a3d331c9f16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0f:2c:16:78:e0:41:2e:c9:0d:bd:d4:70:c6:
ce:9e:f8:a8:64:49:98:f9:05:c9:c6:db:1e:ac:c1:
ba:d5:66:a7:ba:7d:22:0f:36:7e:aa:bc:8a:5c:7e:
5b:db:7c:24:8d:53:cd:86:6a:74:74:e5:91:73:fd:
73:11:b4:82:90:13:a0:0d:59:95:68:43:ca:2a:3c:
3f:19:81:1b:ac:b4:a7:9b:4d:91:35:7a:22:7d:e9:
35:b5:f6:b0:65:e5:a5:2f:1f:4a:14:70:55:84:dd:
9f:dd:c8:25:00:bc:ce:28:ba:f3:90:ba:12:e7:01:
00:37:3c:08:54:4f:a6:3d:65:46:31:0c:52:7a:25:
0c:8b:62:2e:04:4a:c6:e5:66:5b:67:01:03:99:fb:
26:f1:e3:28:0c:a7:de:6e:87:2a:38:e9:75:fc:7d:
c3:5f:0f:81:87:17:c3:1f:50:35:2f:0d:d1:94:e0:
d4:04:2c:37:5d:96:ec:fd:b3:60:72:ee:b8:3a:99:
97:fb:20:9f:84:a2:43:50:c6:4e:7e:13:f8:61:a9:
9d:87:a0:a7:e1:2f:9b:4b:00:00:38:fe:44:15:84:
83:45:e7:46:dc:21:96:db:16:50:ac:74:b2:91:b6:
34:e5:87:af:7c:4c:d0:10:66:4c:16:e2:64:10:8b:
7e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:91:01:63:B2:56:E8:7E:AD:B9:6F:D4:50:CF:6A:3D:33:1C:9F:16
X509v3 Authority Key Identifier:
keyid:82:CC:17:1E:3D:C8:46:71:1E:05:6E:2E:36:24:1D:AC:99:4A:60:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gswXHj3IRnEeBW4uNiQdrJlKYA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2210c7-9959-44f7-ada6-efd3ae985ee4/1/gswXHj3IRnEeBW4uNiQdrJlKYA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2210c7-9959-44f7-ada6-efd3ae985ee4/1/gswXHj3IRnEeBW4uNiQdrJlKYA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:1a:bf:81:0a:5c:10:98:fc:a3:96:9e:c6:3d:cd:73:12:18:
1b:aa:1d:4f:94:2e:2a:43:9e:e4:c0:9f:02:1c:69:d3:77:70:
58:3f:3e:10:25:0a:2a:ae:96:16:0a:5c:0b:dd:ae:13:a1:56:
83:7e:f4:f6:96:1d:4c:b9:53:41:e9:d4:27:57:65:53:11:81:
dc:89:42:c7:63:82:74:06:70:a7:b8:8d:0f:fd:6e:a8:9d:a5:
93:49:32:b8:54:56:70:60:65:c8:69:b9:fc:68:4b:8f:8f:2d:
73:9b:a6:26:16:dd:72:f7:af:af:9d:bc:80:ac:ba:b8:7c:05:
98:ee:f2:01:74:ca:6e:6e:e1:2d:77:35:61:cf:65:93:d7:3d:
74:54:df:38:96:ad:47:1a:e3:ab:83:fe:3a:75:21:d2:73:34:
e1:80:68:86:d6:bc:aa:df:df:41:a5:a1:17:c9:f6:26:99:91:
92:e3:69:f6:59:e8:b0:1c:aa:01:e4:ff:9e:56:9d:26:7c:00:
98:97:e2:3d:6d:48:c8:85:a8:eb:eb:b6:d2:83:e2:bc:f6:d0:
c0:bb:fe:c2:59:d5:55:b1:38:3b:86:b0:d0:c0:6a:32:04:8a:
dd:05:6b:7f:ad:31:15:c8:a8:9b:aa:19:f7:b6:41:bc:18:69:
49:98:78:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:23:39 2026 by rpki-client